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Disclaimer 


This is a limited report on our findings based on our analysis, in accordance with 
good industry practice as at the date of this report, in relation to cybersecurity 
vulnerabilities and issues in the framework and algorithms based on smart 
contracts, the details of which are set out in this report. In order to get a full view of 
our analysis, it is crucial for you to read the full report. While we have done our best 
in conducting our analysis and producing this report, it is important to note that you 
should not rely on this report and cannot claim against us on the basis of what it 
says or doesn’t say, or how we produced it, and it is important for you to conduct 
your own independent investigations before making any decisions. We go into more 
detail on this in the below disclaimer below — please make sure to read it in full. 


DISCLAIMER: By reading this report or any part of it, you agree to the terms of this 
disclaimer. If you do not agree to the terms, then please immediately cease reading 
this report, and delete and destroy any and all copies of this report downloaded 
and/or printed by you. This report is provided for information purposes only and on 
a non-reliance basis, and does not constitute investment advice. No one shall have 
any right to rely on the report or its contents, and TechRate and its affiliates 
(including holding companies, shareholders, subsidiaries, employees, directors, 
officers and other representatives) (TechRate) owe no duty of care towards you or 
any other person, nor does TechRate make any warranty or representation to any 
person on the accuracy or completeness of the report. The report is provided "as 
is", without any conditions, warranties or other terms of any kind except as set out 
in this disclaimer, and TechRate hereby excludes all representations, warranties, 
conditions and other terms (including, without limitation, the warranties implied by 
law of satisfactory quality, fitness for purpose and the use of reasonable care and 
skill) which, but for this clause, might have effect in relation to the report. Except 
and only to the extent that it is prohibited by law, TechRate hereby excludes all 
liability and responsibility, and neither you nor any other person shall have any 
claim against TechRate, for any amount or kind of loss or damage that may result to 
you or any other person (including without limitation, any direct, indirect, special, 
punitive, consequential or pure economic loss or damages, or any loss of income, 
profits, goodwill, data, contracts, use of money, or business interruption, and 
whether in delict, tort (including without limitation negligence), contract, breach of 
statutory duty, misrepresentation (whether innocent or negligent) or otherwise 
under any claim of any nature whatsoever in any jurisdiction) in any way arising 
from or connected with this report and the use, inability to use or the results of use 
of this report, and any reliance on this report. 


The analysis of the security is purely based on the smart contracts alone. No 
applications or operations were reviewed for security. No product code has been 
reviewed. 


Background 


TechRate was commissioned by Hokkaidu Inu to perform an audit of smart 
contracts: 


o https://etherscan.io/address/0xc40afie4fecfa05ce6bab79dcd8b373d2e436c4 


e#code 
The purpose of the audit was to achieve the following: 


e Ensure that the smart contract functions as intended. 
e Identify potential security issues with the smart contract. 


The information in this report should be used to understand the risk exposure of the 
smart contract, and as a guide to improve the security posture of the smart 
contract by remediating the issues that were identified. 


Issues Checking Status 


Race conditions and Reentrancy. 
Cross-function race conditions. 
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Functions outline 


+ Context 
- [Int] _msgSender 
- [Int] _msgData 


+ [Int] IERC20 
- [Ext] totalSupply 
- [Ext] balanceOf 
- [Ext] transfer # 
- [Ext] allowance 
- [Ext] approve # 
- [Ext] transferFrom # 


+ [Lib] SafeMath 

- [Int] add 
- [Int] sub 
- [Int] sub 
- [Int] mul 
- [Int] div 

- [Int] div 

- [Int] mod 
- [Int] mod 


+ [Lib] Address 
- [Int] isContract 
- [Int] sendValue # 
- [Int] functionCall # 
- [Int] functionCall # 
- [Int] functionCallWithValue # 
- [Int] functionCallWithValue # 
- [Prv] _functionCallWithValue # 


+ Ownable (Context) 
- [Int] <Constructor> # 
- [Pub] owner 
- [Pub] renounceOwnership # 
- modifiers: onlyOwner 
- [Pub] transferOwnership # 
- modifiers: onlyOwner 


+ Hokkaidulnu (Context, IERC20, Ownable) 
- [Pub] <Constructor> # 
- [Pub] name 
- [Pub] symbol 
- [Pub] decimals 


- [Pub] totalSupply 
- [Pub] balanceOf 
- [Pub] transfer # 
- [Pub] allowance 
- [Pub] approve # 
- [Pub] transferFrom # 
- [Pub] increaseAllowance # 
- [Pub] decreaseAllowance # 
- [Pub] isExcluded 
- [Pub] totalFees 
- [Pub] reflect # 
- [Pub] reflectionFromToken 
- [Pub] tokenFromReflection 
- [Ext] excludeAccount # 
- modifiers: onlyOwner 
- [Ext] includeAccount # 
- modifiers: onlyOwner 
- [Prv] _approve # 
- [Prv] _transfer # 
- [Prv] _transferStandard # 
- [Prv] _transferToExcluded # 
- [Prv] _transferFromExcluded # 
- [Prv] _transferBothExcluded # 
- [Prv] _reflectFee # 
- [Prv] _getValues 
- [Prv] _getTValues 
- [Prv] _getRValues 
- [Prv] _getRate 
- [Prv] _getCurrentSupply 


($) = payable function 
# = non-constant function 


Security Issues 


High Severity Issues 


No high severity issues found. 


Medium Severity Issues 


No medium severity issues found. 


Low Severity Issues 
1. Out of gas 


Issue: 
Li The function includeAccount() uses the loop to find and remove 
addresses from the _excluded list. Function will be aborted with 
OUT_OF_GAS exception if there will be a long excluded addresses list. 


includeAccount ( account f) onlyOwner() { 
ire(_isExcluded[accountt], ); 
for ( i = 0; i < excluded. length; i++) { 
if (_excluded[i] == account?) { 
; excluded [i] = _excluded[:_excluded. length - 1]; 
_tOwned[accountt] = 0; 


_isExcluded [account = 
_excluded. pop(); 


break; 


Li The function _getCurrentSupply also uses the loop for evaluating total 
supply. It also could be aborted with OUT_OF_GAS exception if there 
will be a long excluded addresses list. 


_getCurrentSupply() returns ( 
rSupply = _rTotal; 
tSupply = _tTotal; 
for ( i = 0; i < | excluded. length; i++) { 
if (_rOwned[_excluded[i]] > rSupply || _tOwned[_excluded[i]] > tSupply) return (_rTotal, _tTotal) 


rSupply = rSupply.sub(_rOwned[:excluded[il]); 
tSupply = tSupply.sub(_tOwned[:excluded[i]]); 


} 
if (rSupply < rTotal.div(_tTotal)) return ({rTotat, _tTotal); 
return (rSupply, tSupply); 


Recommendation: 
Use EnumerableSet instead of array or do not use long arrays. 


Conclusion 


Smart contracts contain only low severity issues. 


Techrate note: 

Please check the disclaimer above and note, the audit makes no statements or warranties 
on business model, investment attractiveness or code sustainability. The report is provided 
for the only contract mentioned in the report and does not include any other potential 
contracts deployed by Owner. 


